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L45: Entry 1 of 1 File: PGPB Mar 6, 2003 

PGPUB- DOCUMENT -NUMBER: 20030046581 
PG PUB -FILING -TYPE : new 

DOCUMENT- IDENTIFIER: US 20030046581 Al 

TITLE: System and method for protecting computer device against overload via network 
attack 

PUBLICATION-DATE: March 6, 2 003 
INVENTOR- INFORMATION : 

NAME CITY STATE COUNTRY RULE- 4 7 

Call, R. Christian Aberdeen NJ US 

Cavuto, David J. Edison NJ US 

Giorgis, Tadesse W. Neptune NJ US 

APPL-NO: 09/ 941981 [PALM] 
DATE FILED: August 29, 2001 

INT-CL: [07] G06 F 11/30 

US-CL-PUBLISHED: 713/201 
US -CL- CURRENT: 713 / 201 

REPRESENTATIVE -FIGURES: 4 
ABSTRACT: 

The present invention protects network devices from overload and from network packet 
flood attacks (such as Denial of Service and Distributed Denial of Service attacks) 
that would otherwise consume available resources, and possibly cause system failure or 
compromise the system by allowing intrusion. The invention, termed an intelligent 
cache management system is used to free allocated resources ( memory, in particular) 
for reuse, when under sustained attack. One exemplary embodiment of a cache management 
system of the present invention is used in connection with session-type packet 
processing devices of a computer network. The system comprises a memory management 
database for storing communication traffic classification and memory threshold values, 
and a memory monitor for tracking overall memory usage and determining when the memory 
threshold values stored in the memory management database are reached. A cache 
classifier is used to determine a class into which a given session of communications 
traffic falls. When the memory threshold value is reached, a pruning mechanism selects 
and prunes entries representing sessions on the packet processing device in accordance 
with the communication traffic classification and memory thresholds programmed in the 
memory management database . 
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US -PAT-NO : 6247042 

DOCUMENT- IDENTIFIER: US 6247042 Bl 

TITLE: Method and system for restoring the state of physical memory as the focus 
changes among application programs in a computer 

DATE-ISSUED: June 12, 2001 



INVENTOR - INFORMATION : 
NAME 

Engstrom; G. Eric 
Eisler; Craig G. 



CITY 

Kirkland 
Kirkland 



STATE 

WA 

WA 



ZIP CODE 



COUNTRY 



ASSIGNEE- INFORMATION: 
NAME 

Microsoft Corporation 



j-NO: 08/ 936358 [PALM] x 
DATE FILED: September 24, 1997 
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FOREIGN- PAT -NO PUBN-DATE COUNTRY US-CL 

620 523 A3 October 1994 EP 

620 523 A2 October 1994 EP 

713 176 A3 May 1996 EP 

713 176 A2 May 1996 EP 



OTHER PUBLICATIONS 



PCT/US98/16800--International Search Report, Sep. 12, 1998. 

"Method of Extending OS/2's Memory management to Recognize "User Focus"", IBM 
Technical Disclosure Bulletin, vol. 35, No. 1A, Jun. 1992, pp. 470-472. 
PCT/US98/16802- -International Search Report, Sep. 12, 1998. 

V. Sohal, Reliable Memory Management for Real-Time Systems, Electronic Design, vol. 
44, No. 13, Jun. 1996, pp. 118, 120, 122, 124 XP000625394, see p. 120, right-hand 
column, line 7-page 124, left-hand column, line 39. 
PCT/US98/16800--International Search Report, Jan. 22, 1999. 

"Packing Variable-Sized Segments in the Swap File of a Paging-Based Virtual Memory 
System", IBM Technical Disclosure Bulletin, vol. 39, No. 3, Mar. 1996, pp. 301/302 
XP000581702 . 

ART-UNIT: 211 



PRIMARY- EXAMINER: Banankhah; Majid 



ABSTRACT : 



A memory monitor automatically restores the state of physical memory allocation of 
application programs when they lose and then regain the focus in a multitasking 
computing environment. The memory monitor monitors the focus of the operating system 
for changes, such as when the user switches from one application to , another. When an 
application loses the focus, the memory monitor determines and stores the state of 
physical memory allocation. When the memory monitor detects that the application has 
re-gained the focus, it re-loads all of the code or data that was in physical memory 
when the application lost the focus, but had been swapped to secondary storage. 



19 Claims, 5 Drawing figures 
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